vulnerability

VMware Workstation: Vulnerability (VMSA-2019-0009) (CVE-2019-5525)

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

Published

Jun 6, 2019

Added

Jun 14, 2019

Modified

Mar 30, 2026

Description

VMware Workstation (15.x before 15.1.0) contains a use-after-free vulnerability in the Advanced Linux Sound Architecture (ALSA) backend. A malicious user with normal user privileges on the guest machine may exploit this issue in conjunction with other issues to execute code on the Linux host where Workstation is installed.

Solution

vmware-workstation-upgrade-15_1_0

References

CVE-2019-5525
https://attackerkb.com/topics/CVE-2019-5525
CWE-416
EUVD-EUVD-2019-15100
http://www.vmware.com/security/advisories/VMSA-2019-0009.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-15100

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report